$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0163f9fe-26a2-3c85-b323-4b72de1d8469.roa File: 0163f9fe-26a2-3c85-b323-4b72de1d8469.roa (raw, json) Hash identifier: 1ZGFm3/0NMWETNwJjCDPAvxDCteSUJTSiooALbl5KTQ= Subject key identifier: CC:99:1A:43:55:6E:A7:27:B9:F5:8B:7F:59:CE:12:28:83:4D:99:0D Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Certificate serial: 010D0C9F4328584957F40DFD15E67D8F1D6C8040 Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0163f9fe-26a2-3c85-b323-4b72de1d8469.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 22773 IP address blocks: 98.179.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0d:fd:15:e6:7d:8f:1d:6c:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=0794fba9-7fb2-459c-b298-854e0df19684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:eb:9d:2e:ab:20:e5:bf:9a:66:36:10:bf: e7:39:1b:cf:b9:4f:c5:db:f4:f3:5b:3a:a9:30:63: 74:5a:f1:25:24:6d:62:d1:0f:50:d3:d4:7f:0d:ed: a4:0b:6f:ed:ec:b7:b1:0a:70:ca:32:91:4e:bc:30: 8e:3f:8b:da:45:4c:ab:22:6c:90:cc:b1:e5:20:f8: ee:2c:1f:57:8c:03:2c:09:7e:f9:8f:47:a8:eb:28: 05:c4:b3:8c:2c:7f:c0:ef:4b:e5:2c:60:c8:16:10: 28:7a:ac:da:56:23:74:d9:02:b3:c3:4d:2b:f7:38: 4e:34:6a:3d:b1:8e:17:b4:00:f8:25:99:5b:9b:65: bf:68:c1:99:22:eb:ec:2a:5b:06:80:09:0c:56:49: c7:68:e4:0c:45:0a:a7:11:7f:1f:93:44:61:b8:f3: dd:b2:24:2b:db:21:84:00:c4:da:0d:76:b6:3e:34: 11:bf:b2:6a:87:ba:85:b5:ba:55:aa:03:ba:b6:b3: d0:67:56:9f:b8:f7:db:c4:07:ab:52:62:e1:22:45: 3a:42:dd:0c:93:0c:2c:19:e4:50:49:d7:61:f0:0f: ba:14:83:ab:f0:35:c6:04:f2:0d:3d:8e:2e:9a:b7: 2c:e4:01:45:24:a1:9c:12:aa:83:ba:ad:22:b3:8a: c8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:99:1A:43:55:6E:A7:27:B9:F5:8B:7F:59:CE:12:28:83:4D:99:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0163f9fe-26a2-3c85-b323-4b72de1d8469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl X509v3 Authority Key Identifier: keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer sbgp-ipAddrBlock: critical IPv4: 98.179.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:85:ca:70:f5:d7:0e:25:80:37:ba:a0:66:c3:ca:b9:58:d3: b3:db:b6:b1:39:bd:60:f4:ad:6a:32:d5:9d:0d:b9:b2:87:37: 7f:69:6e:b1:2e:bb:59:ad:07:34:ed:ea:46:e8:e2:74:5b:18: 5b:36:4e:88:03:e5:65:b0:c6:20:fe:b0:98:f7:1e:9c:87:2d: 33:88:53:78:b9:c2:34:99:93:7e:64:5c:1d:5a:12:97:c2:3e: c1:55:1f:fa:9f:17:9c:9f:39:cb:dc:e8:ec:63:bd:94:71:36: 41:e1:a9:84:4c:95:35:e1:0e:90:2c:63:8e:da:3f:40:e0:00: 75:d8:b4:85:ff:a4:32:1c:b5:ad:05:a6:4a:33:ef:5e:16:b4: 3e:d1:83:ba:e9:99:d6:c5:e6:b6:9b:56:4c:6a:f5:32:8b:c6: fd:60:db:45:bc:23:68:a7:c1:09:fa:7f:e3:96:df:75:8e:e3: 28:8b:66:77:4d:19:18:27:79:44:65:da:b8:a1:c8:6b:c5:e1: 6e:cc:15:bf:54:16:86:f4:96:dc:0f:a4:eb:1c:1b:97:7a:50: e3:94:84:37:4f:cc:bf:db:ca:c1:97:56:d0:de:de:fc:24:32: 7f:50:95:7b:39:9e:08:a4:a7:3c:6f:e4:44:6c:0b:02:40:d3: d5:94:b6:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A39FeZ9jx1sgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy ZmY0MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MDc5NGZiYTktN2ZiMi00NTljLWIyOTgtODU0ZTBkZjE5Njg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna/rnS6rIOW/mmY2EL/nORvPuU/F2/TzWzqp MGN0WvElJG1i0Q9Q09R/De2kC2/t7LexCnDKMpFOvDCOP4vaRUyrImyQzLHlIPju LB9XjAMsCX75j0eo6ygFxLOMLH/A70vlLGDIFhAoeqzaViN02QKzw00r9zhONGo9 sY4XtAD4JZlbm2W/aMGZIuvsKlsGgAkMVknHaOQMRQqnEX8fk0RhuPPdsiQr2yGE AMTaDXa2PjQRv7Jqh7qFtbpVqgO6trPQZ1afuPfbxAerUmLhIkU6Qt0MkwwsGeRQ Sddh8A+6FIOr8DXGBPINPY4umrcs5AFFJKGcEqqDuq0is4rI6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyZGkNVbqcnufWLf1nOEiiDTZkNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDE2M2Y5ZmUtMjZhMi0z Yzg1LWIzMjMtNGI3MmRlMWQ4NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0 NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYrOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWFynD11w4lgDe6oGbDyrlY07PbtrE5vWD0rWoy1Z0NubKHN39pbrEu u1mtBzTt6kbo4nRbGFs2TogD5WWwxiD+sJj3HpyHLTOIU3i5wjSZk35kXB1aEpfC PsFVH/qfF5yfOcvc6OxjvZRxNkHhqYRMlTXhDpAsY47aP0DgAHXYtIX/pDIcta0F pkoz714WtD7Rg7rpmdbF5rabVkxq9TKLxv1g20W8I2inwQn6f+OW33WO4yiLZndN GRgneURl2rihyGvF4W7MFb9UFob0ltwPpOscG5d6UOOUhDdPzL/bysGXVtDe3vwk Mn9QlXs5ngikpzxv5ERsCwJA09WUtkg= -----END CERTIFICATE-----Generated at Sun Apr 6 15:58:40 2025 by rpki-client